Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: V1/HYLtYD7Ypzq8nGB5q6diWHWSKAmNIveW7JELsAm0=
Subject key identifier: 6F:66:A8:B3:84:F3:25:49:76:6A:7E:98:63:CF:5D:1B:79:CD:90:DA
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 0194BC731021827BFB8EE65645F3E45F7034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: mPyhzpWwHY6eY8DgXEox5i4zBkBb8sYKWmb9RzcRVec=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:21:82:7b:fb:8e:e6:56:45:f3:e4:5f:70:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=6f66a8b384f32549766a7e9863cf5d1b79cd90da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:07:b6:96:38:cb:7d:3f:de:d1:aa:61:06:
62:08:3e:b0:d1:52:20:96:d5:88:79:e8:8a:ee:4d:
06:c9:db:74:35:8f:c9:50:fe:e7:f8:84:44:dd:fa:
4a:c7:ca:a3:6f:c5:e1:18:fe:4b:f2:5d:1c:64:d7:
e8:e3:60:e7:b5:a3:55:f3:56:6d:e0:11:08:29:16:
63:27:34:f2:83:d9:43:db:78:50:78:02:c8:5e:ff:
ca:b5:37:50:a2:e9:a0:a9:95:49:23:b9:4d:a7:79:
32:94:0f:35:2c:49:bc:dd:a4:c7:3e:bd:6e:fb:8a:
27:9c:02:b8:f3:3f:bc:bf:ca:3c:7c:d5:d6:20:66:
1a:38:a0:2d:6d:16:5e:aa:6d:ab:08:24:a6:dd:59:
2a:d1:51:e7:47:2a:1f:db:ff:30:4e:32:05:81:29:
e3:95:dd:1c:d8:0c:fe:6f:3c:33:51:f8:ae:1e:55:
bd:90:a0:aa:09:66:4f:20:fe:5f:f5:05:74:cf:6b:
86:f7:30:64:2a:21:d3:cc:1e:33:b4:47:aa:a4:b1:
f4:eb:19:8f:b7:29:ff:7f:a3:a0:48:e0:e2:82:76:
06:d0:0a:54:42:e5:8e:65:87:94:f7:57:38:92:df:
dc:05:91:56:9d:14:14:70:40:c4:15:e9:bf:f6:8e:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:A8:B3:84:F3:25:49:76:6A:7E:98:63:CF:5D:1B:79:CD:90:DA
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:86:90:b9:23:d0:f3:56:e6:9d:2e:ab:bf:bc:05:0b:46:
ed:bd:ed:02:3c:ea:82:5f:11:07:71:36:20:2f:0d:e2:0a:d3:
68:f1:aa:60:46:c8:ed:a3:8d:cc:9f:a6:e2:ef:ef:68:3d:df:
d4:87:40:83:a7:24:e8:46:81:2e:d6:65:ef:f1:fd:2c:2f:6f:
f7:45:e2:3a:13:ac:5c:bd:01:3c:6f:81:10:b6:dd:04:16:e2:
a2:9d:4e:c8:c4:89:16:38:64:f9:0a:49:ed:0c:7f:c3:2b:ec:
03:ba:9b:29:62:0f:5a:1c:33:1a:d3:7d:86:4d:cf:70:0a:d9:
d3:6e:f9:c2:f5:83:9e:93:83:42:1a:9b:99:37:28:68:53:99:
8c:7f:4e:b0:5e:43:d4:38:61:4a:f4:f2:fd:f6:fd:d6:e3:af:
30:65:c4:58:ad:7a:61:02:e0:36:fe:f1:0d:5c:6d:28:15:bc:
30:f2:65:c6:6a:dd:4e:a4:37:ef:0a:33:f3:ea:3e:50:e3:5a:
fa:08:e3:90:b7:fd:ba:70:df:b5:dc:2d:5c:6e:f0:fd:4e:0e:
31:f3:fe:5d:d9:b7:e1:6e:d9:cb:d7:74:a3:48:a1:d2:bc:d7:
40:83:72:50:ab:98:99:83:9e:d8:cb:6f:8f:92:db:8e:8b:c7:
a2:b7:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:31 2025 by rpki-client